Michael Gentile

Sr Security researcher FAANG.
all opinions are mine.

[Mandiant (part of Google Cloud) @Mandiant]

Coruna exploit kit is targeting iOS.

Coruna leverages 23 exploits against Apple devices running iOS 13-17.2.1. It is being used for espionage, and by financially motivated actors to steal crypto.

Update your iOS devices, and learn more about this threat: https://t.co/c7QRDPWMKI

[The Citizen Lab @citizenlab]

NEW REPORT – “From Protest to Peril: Cellebrite Used Against Jordanian Civil Society”

Our investigation reveals that, since 2020, Jordanian authorities have deployed Cellebrite’s forensic extraction products against civil society targets in Jordan.

Full report here: https://t.co/3lyQ82680Y

[Project Zero Bugs @ProjectZeroBugs]

Android: dng_sdk DeltaPerRow out-of-bounds read https://t.co/aKlu7SxrOT

[Security Bug Aggregator @BugsAggregator]

ITW 0-day Google Chrome Sandbox Escape https://t.co/s1ZfWIPn0I

[Low Level @LowLevelTweets]

this is the vibe coded internet of the future btw.

IPv6 edge routers coded by Claude-69

"You're right! I didn't effectively load balance that interface"

[Matthew Green @matthew_d_green]

This thing Facebook did — running an MITM on Snapchat and other competitors’ TLS connections via their Onavo VPN — is so deeply messed up and evil that it completely changes my perspective on what that company is willing to do to its users.

[Cthulhu ( ;,;) @Cthulhu_Answers]

Given that CVE-2024-3094 is a backdoor affecting a widely integrated open-source library xz/liblzma, we have given it the name "Ass Bleed." Our graphic designers have worked through Good Friday to bring you a logo. Please share.

https://t.co/l1bAxqKnd7
https://t.co/tMp1i0UNlo

[SwiftOnSecurity @SwiftOnSecurity]

The most senior person on a call always the one saying “okay tell me I’m an idiot, but”

[William "Balloon Guy" Kim @TheKimulation]

You: zomg the B-21 costs $750 million each, we won't be able to afford it!

Me, an intellectual:

[Molly White @molly0xFFF]

it was the fuck aroundiest of times, it was the find outiest of times

[Roshan Patel @roshanpateI]

By the time a man is 27 and works in tech, he must choose a hobby.

These are the only options:
- Formula 1
- Chess
- Pickleball
- Stock trading
- Hiking
- Health optimization / longevity

[GMI @Global_Mil_Info]

UK Defense Intelligence update for 6/24/23:

Focus on the "armed rebellion" in Russia.

[Cisco Talos Intelligence Group @TalosSecurity]

This week, we released new technical details on the #Predator #spyware and its accompanying #Alien loader. These are important threats to track as the use of commercial spyware rises despite new regulations across the globe https://t.co/0uO5ryBTTl

[Cisco Talos Intelligence Group @TalosSecurity]

We have new details on a #spyware tool called #Predator that's actively being sold and used to unknowingly track targeted users. Here's the full technical breakdown of how this tool works and why the use of "mercenary" spyware is on the rise https://t.co/KTEeu0joqy

[Michael Gentile @MikeGentile54]

@0xkol @offensive_con Thank you for sharing the exploit.

[Joe Słowik 🌻 @jfslowik]

"What's the big deal, he did some consulting for Japan FFS. They're a long-standing..."
𝘴𝘰𝘮𝘦𝘰𝘯𝘦 𝘱𝘶𝘵𝘴 𝘩𝘢𝘯𝘥 𝘰𝘷𝘦𝘳 𝘮𝘪𝘤, 𝘸𝘩𝘪𝘴𝘱𝘦𝘳𝘴 𝘪𝘯 𝘴𝘱𝘦𝘢𝘬𝘦𝘳'𝘴 𝘦𝘢𝘳
"HE TOOK WHAT FROM WHO???"

[Michael Gentile @MikeGentile54]

@brinlystorm I would enjoy seeing this

[Cisco Talos Intelligence Group @TalosSecurity]

We are actively following and responding to the reported #3CX #supplychain attack. Here's what we know so far about this campaign and new Snort rules and other coverage we have available https://t.co/2EfxXIdm6w